Struct sozu_lib::tls::CertificateResolver

pub struct CertificateResolver {
    pub domains: TrieNode<Fingerprint>,
    /* private fields */
}

Parses and stores TLS certificates, makes them available to Rustls for TLS handshakes

Fields

domains: TrieNode<Fingerprint>

all fingerprints of all

Implementations

impl CertificateResolver

pub fn get_certificate( &self, fingerprint: &Fingerprint ) -> Option<CertifiedKeyWrapper>

return the certificate in the Rustls-usable form

pub fn add_certificate( &mut self, add: &AddCertificate ) -> Result<Fingerprint, CertificateResolverError>

persist a certificate, after ensuring validity, and checking if it can replace another certificate

pub fn remove_certificate( &mut self, fingerprint: &Fingerprint ) -> Result<(), CertificateResolverError>

Delete a certificate from the resolver. May fail if there is no alternative for

pub fn replace_certificate( &mut self, replace: &ReplaceCertificate ) -> Result<Fingerprint, CertificateResolverError>

Short-hand for add_certificate and then remove_certificate. It is possible that the certificate will not be replaced, if the new certificate does not match add_certificate rules.

pub fn domain_lookup( &self, domain: &[u8], accept_wildcard: bool ) -> Option<&KeyValue<Key, Fingerprint>>

Trait Implementations

impl Debug for CertificateResolver

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for CertificateResolver

fn default() -> CertificateResolver

Returns the “default value” for a type.